Why accounts getting hacked?

[Aveton 8]

I see alot of topics like "I was hacked, lost all gold and got banned". I just trying to understand why thousands of accounts got hacked. So here is questions for guys who have been hacked: what type of password did you use to log in game? I mean was it like "1234", "blabla", "blaBLA", "blablabla55" or "aN*D9e28dn%ed"? Did you used same password for the game and for the forum?

Main question: have any of you used a true strong and unique password for the game and for the email? Be honest please. Thx.

Edited December 29, 2016 by Aveton

[CatsCantDPS 6]

Read the main site. Another server had the DB leak and the thiefs are trying all of the same account information, along with easy variations to brute-force accounts. The GM response I've seen so far has been troubling, considering this was a day-0 attack, with no warning, and no wrongdoign by the majority of the playerbase.

[Aveton 8]

Yea I saw it. I just thought there may be some other security issues.

PS: A lot of people who got "banned for no reason" is actually were hacked and used for gold selling isn't it?

Edited December 29, 2016 by Aveton

[CatsCantDPS 6]

In the one instance I'm personally aware of, my friends character whispered me to sell gold. I texted him ,he woke up, logged on to kick him off, logged off and changed his password. The next moment he was banned with no warning.

 

He said if his gold total changed significantly, he didnt notice. So theyre probably all just beign used to advertise that site, which is a really strange reason to perma-ban nearly 100 accounts in a single day.

[Slyphe 1]

Before almost all of the goldsellers whispering me were level 6 and had obvious bot names like sjkdskjdks, now I'm getting whispered by characters anywhere from low 20s to late 50s with real names which are probably from stolen accounts. I'm assuming they used the same username/password on here as somewhere else and the database for wherever they were got leaked. Elysium said at least two servers have had their information leaked/sold iirc.

As for permanent account closure for people who had their accounts stolen and used for goldselling spam, that's pretty god damned harsh in my book. I'm not saying there shouldn't be a punishment because "It's not their fault", they should have taken more security precautions, but to permantly close their account without appeal for what is likely a first offense for a lot of these accounts just seems a bit extreme to me, especially when they can see that their account was most likely compromised and used by someone else. That's just my opinion though.

[quest008 0]

24 minutes ago, Slyphe said:

Before almost all of the goldsellers whispering me were level 6 and had obvious bot names like sjkdskjdks, now I'm getting whispered by characters anywhere from low 20s to late 50s with real names which are probably from stolen accounts. I'm assuming they used the same username/password on here as somewhere else and the database for wherever they were got leaked. Elysium said at least two servers have had their information leaked/sold iirc.

As for permanent account closure for people who had their accounts stolen and used for goldselling spam, that's pretty god damned harsh in my book. I'm not saying there shouldn't be a punishment because "It's not their fault", they should have taken more security precautions, but to permantly close their account without appeal for what is likely a first offense for a lot of these accounts just seems a bit extreme to me, especially when they can see that their account was most likely compromised and used by someone else. That's just my opinion though.

Your opinion doesn't matter here. Elysium Project follows a zero tolerance policy.

[Scrooloose 0]

How do you actually change your password? I logged into "Control panel" on the main page and under "Account maintenence" i only see options forcopying characters over from Nost.

 

i would change my password on my forum account see if that helps but all the options are in russian so cant atm :/

 

UPDATE : I managed to change my password on the forums but this does not change your password for your game account. Can anyone link to where i login to change my game account password? :)

Edited December 29, 2016 by Scrooloose

[Slyphe 1]

38 minutes ago, quest008 said:

Your opinion doesn't matter here. Elysium Project follows a zero tolerance policy.

Which is exactly why I stated that it was my opinion.

Forums are for discussion, people are allowed to speak their mind here.

[Slyphe 1]

41 minutes ago, Scrooloose said:

How do you actually change your password? I logged into "Control panel" on the main page and under "Account maintenence" i only see options forcopying characters over from Nost.

Check the control panel when you aren't logged in and then click on "Forgot Password". Follow the steps to reset your password and you should be good.

Additionally, you can reset your password in-game with the command ".account password oldpass newpass newpass", although some people have been saying this hasn't worked for them. If you do try this, make sure to send it in a whisper to yourself so you don't accidentally say it out loud in case you mistype.

Edited December 29, 2016 by Slyphe
Spelling

[Scrooloose 0]

4 minutes ago, Slyphe said:

Check the control panel when you aren't logged in and then click on "Forgot Password". Follow the steps to reset your password and you should be good..

Ty just done this :).... waiting for email though, been 15 mins so far :/

[athero 0]

9 hours ago, Aveton said:

I see alot of topics like "I was hacked, lost all gold and got banned". I just trying to understand why thousands of accounts got hacked. So here is questions for guys who have been hacked: what type of password did you use to log in game? I mean was it like "1234", "blabla", "blaBLA", "blablabla55" or "aN*D9e28dn%ed"? Did you used same password for the game and for the forum?

Main question: have any of you used a true strong and unique password for the game and for the email? Be honest please. Thx.

idk, i can share, i used 8 numbers 1 letter. Changed now ofc. Havnt been registered with same acc/pass on other popular servers, unless it was so long ago that i had forgotten. However it was same acc/pass as i had on old nostalrius. Had my bags and bank emptied, rip months of bwl farming.

[Slyphe 1]

Check spam if you haven't already Scrooloose, that's where mine was sent before.

Which email service do you use by chance? The reason I ask is that Microsoft emails like Outlook and Hotmail are currently blacklisting email from Elysium afaik.

Edited December 29, 2016 by Slyphe

[Scrooloose 0]

2 minutes ago, Slyphe said:

Which email service do you use by chance?

I use Gmail. Still nothing yet. I registered with my Gmail account ok and got my login details. I had a  massive problem recovering my Nost account however so had to start from scratch

[ThatMask 1]

I've seen a few level 60 gold sellers, which I'm guessing were hacked. Does anyone know to report them?

Does the in-game support contact actually work, or is it here on the site?